Ransomware needs a way in. Stolen credentials are the cheapest one.

Mairie Thiverval Grignon Ransomware Attack

Ransomware victimRansomed

bavacaiGroup

FranceCountry

May 28, 2026Discovered

Overview

View group profile

Industry

Government & Defense

Country

France

Discovered

3 months ago

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

bavacai

Total victims

First seen

Nov 2025

Last seen

Jun 2026

Threat level

2.8/10

Aggressiveness5/10

Lethality0/10

Criticality3.6/10

Status breakdown

Claimed

this victim

100.0%28

Targeted sectors

Education Government & Defense Healthcare Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Government & Defense

Known target sector

Country

France

Not a listed target country

Other victims

View all (28)

Same group · bavacai

Forces
—
Claimed
Penticton and District Society for Community Living
—
Claimed
Bd
Switzerland
Claimed
Dolrad
—
Claimed
Mairie Thiverval Grignon
France
Claimed
Dadolighting
—
Claimed

Group activity

Monthly attacks · bavacai

total · avg 9.3/mo